CVE-2015-1345

Currently unrated

Key Information:

Vendor
Gnu
Status
Grep
Vendor
CVE Published:
12 February 2015

Summary

The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option.

References

http://debbugs.gnu.org/cgi/bugreport.cgi?bug=19563
x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security/linuxbu...
x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1447.html
vendor-advisoryx_refsource_REDHAT

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.